CVE-2002-1822

Currently unrated

Key Information:

Vendor
IBM
Status
Http Server
Vendor
CVE Published:
31 December 2002

Summary

IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page (JSP).

References

http://www.iss.net/security_center/static/10628.php
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/6181
vdb-entryx_refsource_BID
http://marc.info/?l=bugtraq&m=103726020802411&w=2
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.